The whole NTP protocol (and deployment practices of the public NTP infrastructure and most private NTP deployments I've seen) is not terribly compatible with st

The whole NTP protocol (and deployment practices of the public NTP infrastructure and most private NTP deployments I've seen) is not terribly compatible with strong security -- a better implementation can only go so far. Fundamentally the NTP implementations work with very strong assumptions that the servers they speak to are honest-- and even ignoring that the network authentication parts are so unusable, well-- that they make PGP/GPG look like a iProduct by comparison, this assumption just isn't a good one because it makes the security very brittle. Look no further than the widespread false leapsecond events in the last couple years. If NTP gets bad data _by mistake_ can we really expect it to stand up to an actual attack?